The bug affected accounts with 52-character user names, and had several pre-conditions that needed to be met in order to be exploited.

As businesses worry over deepfake scams and other AI attacks, organizations are adding guidance for cybersecurity teams on how to detect, and respond to, next-generation threats. That includes Exabeam, which was recently targeted by a deepfaked job candidate.

CISA and the FBI released a Product Security Bad Practices Report asserting C, C++, and other languages cause potential security breaches.

The Pakistan-based advanced persistent threat actor has been carrying on a cyber-espionage campaign targeting organizations on the subcontinent for more than a decade, and is now using a new and improved "ElizaRAT" malware.

The Iran-linked group Emennet Pasargad aims to undermine public confidence in Israel and Western nations by using hack-and-leak campaigns and disrupting government services, including elections.

In a scenario reminiscent of a modern-day Italian Job, hackers have allegedly breached Italy’s national security, exposing confidential data of some of the country’s most prominent political …

A new Which? report outlines serious privacy concerns with smart device products including air fryers

Medical institutions are among the top targets for threat actors, here five major threats facing the healthcare sector and what organizations can do to stay secure

Google clarified it was the first undiscovered memory safety bug to be flagged by an AI agent, touting this as a significant step in using AI for vulnerability research

A hacker claimed to have stolen 400,000 rows of user data from Schneider Electric and took to social media to taunt the French multinational

Attackers are exploiting the "Envelopes: create API" of the enormously popular document-signing service to flood corporate inboxes with convincing phishing emails aimed at defrauding organizations. It's an unusual attack vector with a high success rate.

Government and industry want to jump-start the conversation around "human-centric cybersecurity" to boost the usability and effectiveness of security products and services.

Zero trust is a mature approach that will improve your organization's security.

NIST's new post-quantum cryptography standards are here, so what comes next? We dig into the world of quantum computing for cybersecurity pros.

A Dark Reading poll reveals widespread concern over disinformation about election integrity and voter fraud, even as Russia steps up deepfake attacks meant to sow distrust in the voting process among the electorate.

A year after Broadcom acquired VMware, the company released VMware Tanzu Data Services to make connections to third-party data engines easier.

This is a comprehensive list of the best encryption software and tools, with features, pricing and more. Use this guide to find your best fit.